Microsoft's AI Red Team Reveals Zero-Click Attack Chains in Agentic AI Systems

On June 4, 2026, Microsoft updated its 'Taxonomy of Failure Modes in Agentic AI Systems' based on a year of red teaming. The update highlights the emergence of zero-click attack chains that can bypass human-in-the-loop (HitL) controls, allowing attackers to exploit agentic AI systems without any user interaction beyond the initial trigger. Seven new failure modes were introduced, including agentic supply chain compromise and goal hijacking. These attacks leverage techniques like cross-domain prompt injection and session context contamination, leading to significant risks such as data exfiltration. The findings indicate that traditional security measures are insufficient against these new attack vectors. The update is a response to the evolving threat landscape, particularly with the rise of open-source agentic frameworks. Microsoft emphasizes the need for enhanced detection and mitigation strategies to address these vulnerabilities.

Key Points: • Zero-click attack chains can bypass human oversight in agentic AI systems. • Seven new failure modes were identified, including supply chain compromise and goal hijacking. • Traditional security measures are inadequate against the evolving threats posed by agentic AI.